Interactive support for secure programming education

SIGCSE 2013 - Proceedings of the 44th ACM Technical Symposium on Computer Science Education

Volumn , Issue , 2013, Pages 687-692

  Zhu, Jun ^a   Lipford, Heather Richter ^a   Chu, Bill ^a  

^a University of North Carolina at Charlotte   (United States)

Author keywords

IDE; Secure Programming; Security Education

Indexed keywords

CURRICULA; EDUCATION COMPUTING; INTEGRODIFFERENTIAL EQUATIONS; SECURITY OF DATA;

CONTINUOUS REINFORCEMENT; INTEGRATED DEVELOPMENT ENVIRONMENT; INTERACTIVE SUPPORTS; OBSERVATIONAL STUDY; PROGRAMMING ASSIGNMENTS; SECURE PROGRAMMING; SECURITY EDUCATION; SECURITY VULNERABILITIES;

STUDENTS;

EID: 84876250856     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2445196.2445396     Document Type: Conference Paper

References (20)

1. Azadegan, S. and O'Leary, M. 2006. Incorporating Security Concepts into First Course. International Workshop on Informatics Education: Bridging the University/Industry Gap, Santiago, Chile.
2. Chu, B., Stranathan, W., Cody, J., Peterson, J., Wenner, A. and Yu, H. 2009. Teaching Secure Software Development. In Proceedings of the 13th Colloquium for Information Systems Security Education, Fairbanks, AK.
3. Graff, M. and Wyk, K. R. 2003. Secure Coding: Principles and Practices, O'Reilly, Sebastopol, CA.
4. Howard, M. and LeBlanc, D. 2003. Writing Secure Code. Microsoft Press, Redmond, WA.
5. Howard, M. and Lipner, S.. The Security Development Lifecycle. Microsoft Press, Redmond, WA.
6. Irvine, C. E., Chin, S. and Frincke, D. 1998. Integrating Security into the Curriculum, IEEE Computer (Dec. 1998), 25-30.
7. Lipford, H.R., Xie, J., Stranathan, W., Oakley, D., and Chu, B. 2010. The Impact of a Structured Application Framework on Web Application Security. In Proceedings of the 14th Colloquium for Information Systems Security Education, Baltimore, MD.
8. McGraw Gary. 2006. Software Security: Building Security In. Addison-Wesley Professional, Boston, MA.
9. Nance, K. 2009. Teach Them When They Aren't Looking: Introducing Security in CS1. IEEE Security and Privacy. 7, 5 (September 2009), 53-55.
10. Oracle.com 2012. Secure Coding Guidelines for the Java Programming Language, Version 4.0. Retrieved September 5, 2012 from http://www.oracle.com/ technetwork/java/seccodeguide-139067.html
11. OWASP.org 2010. OWASP ESAPI. Retrieved September 5, 2012 from https://www.owasp.org/index.php/Category:OWASP-Enterprise-Security-API
12. Perrone, L. F., Aburdene, M. and Meng, X. 2006. Approaches to undergraduate instruction in computer security. In Proceedings of the 2006 American Society for Engineering Education Annual Conference and Exhibition, Portland, OR.
13. SANS Institute 2008. The SANS Awards for Finding Coding Books with Secure programming Flaws. Retrieved February 16, 2008 from http://www.sans-ssi.org/ resources/Winners-of-insecure-coding-contest-20080721.pdf
14. Seacord, R. C. 2008. CERT C Secure Coding Standards. Addison-Wesley Professional, Boston, MA.
15. Taylor, B. and Azadegan, S. 2006. Threading Secure Coding Principles and Risk Analysis into the Undergraduate Computer Science and Information Systems Curriculum. In Proceedings of Information Security Curriculum Development Conference, Kennesaw, GA.
16. Taylor, B. and Azadegan, S. 2007. Using Security Checklists and Scorecards in CS Curriculum. In Proceedings of the National Colloquium for Information Systems Security Education, Boston, MA.
17. Taylor, B. and Azadegan, S. 2008. Moving beyond security tracks: integrating security in CS0 and CS1. In Proceedings of the 39th SIGCSE technical symposium on Computer Science Education, Vancouver, Canada.
18. US Department of Homeland Security 2007. Software Assurance: A Curriculum Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software.
19. Xie, J., Chu, B., and Lipford, H. R. 2011. ASIDE: IDE Support for Web Application Security. In Proceedings of the 27th Annual Computer Security Applications Conference, Orlando, FL.
20. Xie, J., Lipford, H. R., and Chu, B. 2012. Evaluating interactive support for secure programming. In Proceedings of the 2012 ACM Annual Conference on Human Factors in Computing Systems, Austin, TX.